Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/9ScuOR40JPEdevNO4cbm0kljTAE.roa
File: 9ScuOR40JPEdevNO4cbm0kljTAE.roa (raw, json)
Hash identifier: z5jkUUVkRMGDyRvntls/c34nppviE90iTNDVa2nDpsg=
Subject key identifier: F5:27:2E:39:1E:34:24:F1:1D:7A:F3:4E:E1:C6:E6:D2:49:63:4C:01
Certificate issuer: /CN=2e03bff3e7352373238964647dfd893b26a3b349
Certificate serial: 019B7BA4B0887127D110FF30F2D1B50140B8
Authority key identifier: 2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/9ScuOR40JPEdevNO4cbm0kljTAE.roa
Signing time: Thu 01 Jan 2026 22:19:09 +0000
ROA not before: Thu 01 Jan 2026 22:19:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202970
IP address blocks: 185.148.232.0/22 maxlen: 22
185.148.232.0/23 maxlen: 23
185.148.234.0/23 maxlen: 23
185.148.234.0/24 maxlen: 24
185.148.235.0/24 maxlen: 24
2a07:62c0::/29 maxlen: 29
2a07:62c0::/30 maxlen: 30
2a07:62c4::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:b0:88:71:27:d1:10:ff:30:f2:d1:b5:01:40:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e03bff3e7352373238964647dfd893b26a3b349
Validity
Not Before: Jan 1 22:19:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5272e391e3424f11d7af34ee1c6e6d249634c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:fa:40:f2:db:95:bb:e8:fa:68:e0:dd:a3:
73:ee:19:07:c0:22:2c:4f:33:63:79:0f:2f:f0:be:
ce:ab:85:72:ad:5b:d6:ed:8e:2b:da:d2:be:c6:bb:
8f:8d:17:14:c1:ba:e3:66:20:54:09:c5:49:84:61:
93:27:19:51:22:8d:64:6e:c7:5a:52:87:e1:e8:28:
62:f4:f9:c4:1c:fa:8f:37:c0:09:1f:6c:2c:50:68:
3f:58:70:2c:cf:1c:8c:8d:22:f0:40:49:dc:d1:d3:
95:7f:b1:fd:a4:e0:a6:49:37:ed:6e:f2:e3:8f:2a:
9b:7b:d5:d4:57:c8:62:8e:74:57:03:86:74:33:3f:
b8:00:73:c1:1e:7d:79:dd:fb:50:8e:b4:38:4e:c1:
d4:d7:17:ef:30:c5:f4:01:7b:26:b8:8a:7d:dd:52:
5b:c3:ad:b2:24:ff:56:63:87:5b:19:db:f3:1a:2b:
be:6b:00:d0:27:93:d2:78:22:03:75:16:7c:a4:fc:
7e:d7:22:36:7a:36:4a:69:e2:00:c1:b5:b4:48:05:
bb:8f:14:ba:ef:d2:1e:d9:ba:df:10:14:57:53:e2:
0b:0d:2e:0b:1f:59:78:a1:ce:3a:5a:f3:b5:75:e5:
83:6d:8b:23:83:41:d1:5e:01:00:6a:3e:e6:08:45:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:27:2E:39:1E:34:24:F1:1D:7A:F3:4E:E1:C6:E6:D2:49:63:4C:01
X509v3 Authority Key Identifier:
keyid:2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/9ScuOR40JPEdevNO4cbm0kljTAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.232.0/22
IPv6:
2a07:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
3f:7c:6d:b1:79:b0:d7:98:43:4f:20:ae:06:49:17:c5:44:90:
f4:65:91:aa:ab:d2:d7:da:c0:17:7c:da:b8:27:5d:6f:89:ad:
1f:85:cd:6f:06:2f:73:5b:28:89:5d:dc:c2:f3:0f:e0:c4:07:
c9:58:97:5e:ed:b0:87:1d:6a:78:36:5e:74:d0:aa:52:71:4c:
ce:4c:2d:23:07:ab:c8:90:5c:74:4f:60:ec:3f:90:57:99:c5:
43:30:86:ce:1b:dd:e2:57:23:fa:24:84:9b:ba:93:79:ae:4f:
e8:7c:f2:b4:d9:fa:9e:60:58:88:dd:7c:cf:eb:8e:de:90:e6:
82:1b:10:55:69:0a:0a:51:a5:3c:60:65:db:eb:59:39:78:e3:
1b:2b:c1:2f:6b:87:e1:98:21:14:6a:76:3b:e9:b5:6b:b5:47:
77:3b:bc:ea:00:1c:a0:a9:b6:a4:73:b2:00:e4:61:01:f2:86:
3d:c3:45:b3:7e:09:73:66:d0:92:af:34:b2:2b:5c:90:2e:f0:
48:74:d9:24:be:e1:cf:9e:92:ac:5b:32:7a:05:a3:76:63:9f:
f6:df:4f:e2:d5:b1:a0:ce:9f:00:20:24:d5:d9:ea:4d:10:58:
70:9d:c7:aa:19:56:9e:d9:9c:10:86:7b:e8:f1:56:c5:fc:03:
a3:ca:b3:26
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZt7pLCIcSfREP8w8tG1AUC4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMDNiZmYzZTczNTIzNzMyMzg5NjQ2NDdkZmQ4OTNiMjZh
M2IzNDkwHhcNMjYwMTAxMjIxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTI3MmUzOTFlMzQyNGYxMWQ3YWYzNGVlMWM2ZTZkMjQ5NjM0YzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonH6QPLblbvo+mjg3aNz7hkHwCIs
TzNjeQ8v8L7Oq4VyrVvW7Y4r2tK+xruPjRcUwbrjZiBUCcVJhGGTJxlRIo1kbsda
Uofh6Chi9PnEHPqPN8AJH2wsUGg/WHAszxyMjSLwQEnc0dOVf7H9pOCmSTftbvLj
jyqbe9XUV8hijnRXA4Z0Mz+4AHPBHn153ftQjrQ4TsHU1xfvMMX0AXsmuIp93VJb
w62yJP9WY4dbGdvzGiu+awDQJ5PSeCIDdRZ8pPx+1yI2ejZKaeIAwbW0SAW7jxS6
79Ie2brfEBRXU+ILDS4LH1l4oc46WvO1deWDbYsjg0HRXgEAaj7mCEXDSwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPUnLjkeNCTxHXrzTuHG5tJJY0wBMB8GA1UdIwQY
MBaAFC4Dv/PnNSNzI4lkZH39iTsmo7NJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGdPXzgtYzFJM01qaVdSa2ZmMkpPeWFqczBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xYWM3OTUtMmU5My00MDU2LTkzZDkt
Njg0ZTg1NWQ3ZGRjLzEvOVNjdU9SNDBKUEVkZXZOTzRjYm0wa2xqVEFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8xYWM3OTUtMmU5My00MDU2LTkzZDktNjg0ZTg1NWQ3ZGRj
LzEvTGdPXzgtYzFJM01qaVdSa2ZmMkpPeWFqczBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZToMA0E
AgACMAcDBQMqB2LAMA0GCSqGSIb3DQEBCwUAA4IBAQA/fG2xebDXmENPIK4GSRfF
RJD0ZZGqq9LX2sAXfNq4J11via0fhc1vBi9zWyiJXdzC8w/gxAfJWJde7bCHHWp4
Nl500KpScUzOTC0jB6vIkFx0T2DsP5BXmcVDMIbOG93iVyP6JISbupN5rk/ofPK0
2fqeYFiI3XzP647ekOaCGxBVaQoKUaU8YGXb61k5eOMbK8Eva4fhmCEUanY76bVr
tUd3O7zqABygqbakc7IA5GEB8oY9w0WzfglzZtCSrzSyK1yQLvBIdNkkvuHPnpKs
WzJ6BaN2Y5/230/i1bGgzp8AICTV2epNEFhwnceqGVae2ZwQhnvo8VbF/AOjyrMm
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:45:13 2026 by rpki-client